Denial of Service Vulnerability in Multiple Huawei Products

Huawei S12700 and others are intelligent routing switches from Huawei China. A denial of service vulnerability exists in several Huawei products, which stems from a lack of input detection in the program. A remote attacker can exploit the vulnerability by sending specially crafted Resource...

Denial of service vulnerability in multiple Huawei switches

Huawei S12700, S5700, S6700, S7700, S9700 are switching devices from Huawei China. A denial of service vulnerability exists in multiple Huawei switches. Due to the lack of input checksums on the device, a remote attacker can exploit the vulnerability to construct malformed Resource Reservation...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-4552. Reason: This candidate is a reservation duplicate of CVE-2016-4552. Notes: All CVE users should reference CVE-2016-4552 instead of this candidate. All references and descriptions in this candidate have been removed to...

CVE-2016-5103

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-4552. Reason: This candidate is a reservation duplicate of CVE-2016-4552. Notes: All CVE users should reference CVE-2016-4552 instead of this candidate. All references and descriptions in this candidate have been removed to...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-8823. Reason: This candidate is a reservation duplicate of CVE-2016-8823. Notes: All CVE users should reference CVE-2016-8823 instead of this candidate. All references and descriptions in this candidate have been removed to...

CVE-2016-9621

CVE-2016-9621 is rejected/not used and does not represent an active vulnerability entry.

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-5195. Reason: This candidate is a reservation duplicate of CVE-2016-5195. Notes: All CVE users should reference CVE-2016-5195 instead of this candidate. All references and descriptions in this candidate have been removed to...

CVE-2016-5875

REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-5314. Reason: This candidate is a reservation duplicate of CVE-2016-5314. Notes: All CVE users should reference CVE-2016-5314 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-5314. Reason: This candidate is a reservation duplicate of CVE-2016-5314. Notes: All CVE users should reference CVE-2016-5314 instead of this candidate. All references and descriptions in this candidate have been removed to...

CVE-2016-5616

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-6663. Reason: This candidate is a reservation duplicate of CVE-2016-6663. Notes: All CVE users should reference CVE-2016-6663 instead of this candidate. All references and descriptions in this candidate have been removed to...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-6664. Reason: This candidate is a reservation duplicate of CVE-2016-6664. Notes: All CVE users should reference CVE-2016-6664 instead of this candidate. All references and descriptions in this candidate have been removed to...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-6663. Reason: This candidate is a reservation duplicate of CVE-2016-6663. Notes: All CVE users should reference CVE-2016-6663 instead of this candidate. All references and descriptions in this candidate have been removed to...

CVE-2016-5616

CVE-2016-5616 describes a race condition in MySQL’s MyISAM table repair process. If an attacker has shell access to the server running mysqld, they could exploit the race to change permissions on arbitrary files writable by the mysql system user, potentially gaining privilege escalation. The vuln...

seatme.nl XSS vulnerability

Vulnerable URL: https://www.seatme.nl/directreserveren/zoekrestaurants.htm?fhlocation=//seatme/nlNL/date20161025;30000101/numpersonsa2/mammam1110;mam1140;mam1170;mam1200;mam1230;mam1260;mam1/$s=\u003Cimg\u0020src\u003Dx\u0020onerror\u003Dprompt\u0028\u0027OPENBUGBOUNTY\u0027\u0029\u003E Details:...

Threat Outbreak Alert RuleID25196: Email Messages Distributing Malicious Software on September 26, 2016

Medium Alert ID: 49042 First Published: 2016 September 26 18:27 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID25196 may contain the following files: Name ...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-5333. Reason: This candidate is a reservation duplicate of CVE-2016-5333. Notes: All CVE users should reference CVE-2016-5333 instead of this candidate. All references and descriptions in this candidate have been removed to...

CVE-2016-6895

CVE-2016-6895 is a reservation duplicate of CVE-2016-5333 and refers to the same issue described for VMware Photon OS OVA 1.0. CVE-2016-5333 states that VMware Photon OS OVA 1.0 released prior to 2016-08-14 contained a default public SSH key in an authorized_keys file, enabling remote attackers t...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-4993. Reason: This candidate is a reservation duplicate of CVE-2016-4993. Notes: All CVE users should reference CVE-2016-4993 instead of this candidate. All references and descriptions in this candidate have been removed to...

WordPress Plugin Booking Calendar 6.2 - SQL Injection

WordPress Plugin Booking Calendar 6.2 - SQL Injection SQL injection vulnerability in Booking Calendar WordPress Plugin Abstract An SQL injection vulnerability exists in the Booking Calendar WordPress plugin. This vulnerability allows an attacker to view data from the database. The affected...

WordPress Booking Calendar 6.2 Plugin - SQL Injection

Exploit for php platform in category web applications SQL injection vulnerability in Booking Calendar WordPress Plugin Abstract An SQL injection vulnerability exists in the Booking Calendar WordPress plugin. This vulnerability allows an attacker to view data from the database. The affected...